This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/7edbcf-b90f-4707-b289-a3d377c6feef/1/tv5j7ooj9JFuQFNTHmlQ22wx6AU.mft File: tv5j7ooj9JFuQFNTHmlQ22wx6AU.mft (raw, json) Hash identifier: s5iqeNGx4UkRq0LTpwHHpu06J2ToyNWba5jZeN2iv0k= Subject key identifier: BF:99:70:24:84:5E:3E:93:8D:98:CD:23:BE:B1:F3:F1:8B:D9:C9:03 Authority key identifier: B6:FE:63:EE:8A:23:F4:91:6E:40:53:53:1E:69:50:DB:6C:31:E8:05 Certificate issuer: /CN=b6fe63ee8a23f4916e4053531e6950db6c31e805 Certificate serial: 019B717DDB6F1F295F2A9E37528F7AAE9F62 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tv5j7ooj9JFuQFNTHmlQ22wx6AU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/7edbcf-b90f-4707-b289-a3d377c6feef/1/tv5j7ooj9JFuQFNTHmlQ22wx6AU.mft Manifest number: 17A2 Signing time: Tue 30 Dec 2025 23:00:32 +0000 Manifest this update: Tue 30 Dec 2025 23:00:32 +0000 Manifest next update: Wed 31 Dec 2025 23:00:32 +0000 Files and hashes: 1: TDDnhsWgxkGdG7BfGlC4CIB8hXc.roa (hash: mAFWPEFNFtu12Nez2hG2dDFI+Ij+KVUdoJCzsE5w8Wg=) 2: tv5j7ooj9JFuQFNTHmlQ22wx6AU.crl (hash: NcKEC9laRVIB6v9LXrZapRJY+s8+1FIjvM0V7QJwOgQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/7edbcf-b90f-4707-b289-a3d377c6feef/1/tv5j7ooj9JFuQFNTHmlQ22wx6AU.crl rsync://rpki.ripe.net/repository/DEFAULT/de/7edbcf-b90f-4707-b289-a3d377c6feef/1/tv5j7ooj9JFuQFNTHmlQ22wx6AU.mft rsync://rpki.ripe.net/repository/DEFAULT/tv5j7ooj9JFuQFNTHmlQ22wx6AU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 23:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:71:7d:db:6f:1f:29:5f:2a:9e:37:52:8f:7a:ae:9f:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b6fe63ee8a23f4916e4053531e6950db6c31e805 Validity Not Before: Dec 30 23:00:32 2025 GMT Not After : Dec 31 23:00:32 2025 GMT Subject: CN=bf997024845e3e938d98cd23beb1f3f18bd9c903 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:64:75:39:9c:84:25:2a:d1:bc:d1:e2:30:74: 8e:8d:e9:85:c5:d6:bc:91:8f:fb:67:4c:00:0e:36: c6:ff:87:00:72:c4:e9:a7:9c:8d:51:e6:c9:ef:ac: 21:41:56:9e:0e:ae:fb:61:cb:1a:02:2a:cf:8d:cf: 3d:7c:08:2d:0b:e3:b3:21:79:73:75:e2:bf:f4:7a: 52:6a:95:14:23:b7:1f:3b:c9:48:95:45:d3:23:3f: d7:f5:a1:af:11:b2:b2:ab:07:51:38:0a:88:1e:2f: 6f:8b:97:d0:e5:1e:60:df:ec:7c:9e:94:d9:b0:79: 63:03:18:2e:6e:ec:44:14:eb:1b:fb:c6:8c:24:94: 9f:25:fa:85:7a:28:09:69:16:15:9d:e9:67:94:cd: 56:ca:e0:52:35:6a:bf:66:69:b0:46:4d:aa:77:b6: ad:d9:75:ad:76:6f:c7:af:71:f0:eb:a5:29:09:0c: 09:2b:e9:98:01:79:55:0d:9e:8b:e1:d5:03:57:4d: 1d:90:3d:2d:10:56:6b:59:84:5a:4f:09:ab:22:d5: a4:5b:49:08:bc:e6:ce:3f:b6:01:c1:c2:da:b4:d6: de:b0:55:58:dd:bc:f5:b2:2f:05:40:86:fc:88:b1: dd:c2:1a:4e:36:7b:03:21:10:c3:7b:69:03:d0:d3: d4:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:99:70:24:84:5E:3E:93:8D:98:CD:23:BE:B1:F3:F1:8B:D9:C9:03 X509v3 Authority Key Identifier: keyid:B6:FE:63:EE:8A:23:F4:91:6E:40:53:53:1E:69:50:DB:6C:31:E8:05 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tv5j7ooj9JFuQFNTHmlQ22wx6AU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/7edbcf-b90f-4707-b289-a3d377c6feef/1/tv5j7ooj9JFuQFNTHmlQ22wx6AU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/de/7edbcf-b90f-4707-b289-a3d377c6feef/1/tv5j7ooj9JFuQFNTHmlQ22wx6AU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ab:22:3b:d1:74:41:46:ed:f7:7d:84:a7:bd:23:2d:b7:fc:40: 96:2f:c9:f0:6e:86:64:94:72:cf:6d:6d:f6:e7:cd:f9:ae:df: 40:2d:20:22:ed:c1:8f:07:f9:f2:9e:1a:4d:df:55:d7:62:a3: de:8f:b6:1e:24:e3:c1:de:15:69:37:84:97:e6:52:4c:01:4d: 55:d9:09:26:e5:cc:e6:3f:a2:94:a2:cd:fb:9f:02:ab:e5:a6: 1d:78:37:31:bb:04:2e:de:a9:1a:e5:31:a6:55:41:75:ff:ba: 95:4f:b7:4f:a4:a0:3e:10:5a:03:1f:08:f9:d1:9f:34:38:44: fd:6c:8a:c2:07:b8:6e:29:a4:ad:28:1b:91:66:8f:16:86:21: 9a:57:86:77:c2:43:08:22:58:e8:3f:0f:06:9e:20:7d:9a:6f: 51:0a:d4:25:3e:e2:de:d8:60:a2:8f:de:0e:a9:37:fd:b8:7f: a5:30:b4:39:b8:07:c5:a0:be:88:1a:38:73:30:a3:73:89:99: ec:94:bc:47:57:af:f9:ac:24:f2:04:c2:ce:61:24:a4:df:df: f9:ee:24:c2:2d:00:4d:00:2f:96:d6:ce:23:43:98:e5:5e:1b: 60:1e:33:dc:ca:5e:32:fe:91:8f:ec:2a:f7:fe:b2:9c:dc:82: e0:ac:e8:01 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtxfdtvHylfKp43Uo96rp9iMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI2ZmU2M2VlOGEyM2Y0OTE2ZTQwNTM1MzFlNjk1MGRiNmMz MWU4MDUwHhcNMjUxMjMwMjMwMDMyWhcNMjUxMjMxMjMwMDMyWjAzMTEwLwYDVQQD EyhiZjk5NzAyNDg0NWUzZTkzOGQ5OGNkMjNiZWIxZjNmMThiZDljOTAzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj2R1OZyEJSrRvNHiMHSOjemFxda8 kY/7Z0wADjbG/4cAcsTpp5yNUebJ76whQVaeDq77YcsaAirPjc89fAgtC+OzIXlz deK/9HpSapUUI7cfO8lIlUXTIz/X9aGvEbKyqwdROAqIHi9vi5fQ5R5g3+x8npTZ sHljAxgubuxEFOsb+8aMJJSfJfqFeigJaRYVnelnlM1WyuBSNWq/ZmmwRk2qd7at 2XWtdm/Hr3Hw66UpCQwJK+mYAXlVDZ6L4dUDV00dkD0tEFZrWYRaTwmrItWkW0kI vObOP7YBwcLatNbesFVY3bz1si8FQIb8iLHdwhpONnsDIRDDe2kD0NPUfwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL+ZcCSEXj6TjZjNI76x8/GL2ckDMB8GA1UdIwQY MBaAFLb+Y+6KI/SRbkBTUx5pUNtsMegFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdHY1ajdvb2o5SkZ1UUZOVEhtbFEyMnd4NkFVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS83ZWRiY2YtYjkwZi00NzA3LWIyODkt YTNkMzc3YzZmZWVmLzEvdHY1ajdvb2o5SkZ1UUZOVEhtbFEyMnd4NkFVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZS83ZWRiY2YtYjkwZi00NzA3LWIyODktYTNkMzc3YzZmZWVm LzEvdHY1ajdvb2o5SkZ1UUZOVEhtbFEyMnd4NkFVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqyI70XRB Ru33fYSnvSMtt/xAli/J8G6GZJRyz21t9ufN+a7fQC0gIu3Bjwf58p4aTd9V12Kj 3o+2HiTjwd4VaTeEl+ZSTAFNVdkJJuXM5j+ilKLN+58Cq+WmHXg3MbsELt6pGuUx plVBdf+6lU+3T6SgPhBaAx8I+dGfNDhE/WyKwge4bimkrSgbkWaPFoYhmleGd8JD CCJY6D8PBp4gfZpvUQrUJT7i3thgoo/eDqk3/bh/pTC0ObgHxaC+iBo4czCjc4mZ 7JS8R1ev+awk8gTCzmEkpN/f+e4kwi0ATQAvltbOI0OY5V4bYB4z3MpeMv6Rj+wq 9/6ynNyC4KzoAQ== -----END CERTIFICATE-----Generated at Wed Dec 31 03:42:13 2025 by rpki-client